News
NCC-CSIRT identifies two cyber attacks via Facebook, charging phones
Nasiru Yusuf
The Nigerian Communications Commission’s Cyber Security Incident Response Team (NCC-CSIRT) has independently identified two cyber vulnerabilities and advised Nigerian telecom consumers on the measures to be taken to get protected from the cyber-attacks.
KANO FOCUS reports that the CSIRT, in its first-ever security advisories less than three months after its creation, has solely identified the two cyber-attacks targeting the consumers and proffer solutions that can help telecom consumers from falling victims to the two cyber vulnerabilities.
This is contained in a statement sent to KANO FOCUS by Director, Public Affairs Dr. Ikechukwu Adinde on Friday.
The statement said the first is described as Juice Jacking, which can gain access into consumers’ devices when charging mobile phones at public charging stations and it applies to all mobile phones.
The other is a Facebook for Android Friend Acceptance Vulnerability, which targets only Android Operating System.
According to CSIRT security Advisory 0001 released on January 26, 2022, with Juice Jacking, attackers have found a new way to gain unauthorized entry into unsuspecting mobile phone users devices when they charge their mobile phones at public charging stations.
Many public spaces, restaurants, malls and even in the public trains do offer complementary services to their customers in a bid to enhance customer services, one of which is providing charging ports or sockets.
However, an attacker can leverage this courtesy to load a payload in the charging station or on the cables they would leave plugged in at the stations.
“Once unsuspecting persons plug their phones at the charging station or the cable left by the attacker, the payload is automatically downloaded on the victims’ phone.
“This payload then gives the attacker remote access to the mobile phone, allowing them to monitor data transmitted as text, or audio using the microphone. The attacker can even watch the victim in real time if the victims’ camera is not covered. The attacker is also given full access to the gallery and also to the phone’s Global Positioning System (GPS) location.
“When an attacker gains access to a user’s Mobile phone, he gets remote access to the User’s phone which leads to breach in Confidentiality, Violation of Data Integrity and bypass of Authentication Mechanisms. Symptoms of attack may include sudden spike in battery consumption, device operating slower than usual, apps taking a long time to load, and when they load they crash frequently and cause abnormal data usage,” the statement said.
It added that the NCC-CSIRT, however, proffered solutions to this attack to include using ‘charging only USB cable’, to avoid Universal Serial Bus (USB) data connection; using one’s AC charging adaptor in public space; and not granting trust to portable devices prompt for USB data connection.
Other preventive measures against Juice Jacking, according to the statement include installing Antivirus and updating them to the latest definitions always; keeping mobile devices up to date with the latest patches; using one’s own power bank; keeping mobile phone off when charging in public places; as well as ensuring use of one’s own charger, if one must charge in public.
On the other hand, the NCC-CSIRT Advisory 0001 of January 27, 2022, warns that Facebook for Android is vulnerable to a permission issue which gives privilege to anyone with physical access to the android device to accept friend requests without unlocking the phone. The products affected include Versions 329.0.0.29.120 of Android OS.
With this, the attacker will be able to add the victim as a friend and collect personal information of the victim, such as Email, Date of Birth, Check-ins, Mobile phone number, Address, Pictures and other information that the victim may have shared, which would only be visible to his/her friends.
However, to be protected from the Facebook-associated vulnerability, NCC-CSIRT in the security advisory recommends to users to disable the feature from their device’s lock screen notification settings.
The NCC-CSIRT was inaugurated in October, 2021 to provide guidance and direction for the constituents in dealing with issues relating to the security of critical infrastructure in their possession, and periodically assess, review and collate the threat landscape, risks, and opportunities affecting the communications sector, in order to provide advice to relevant stakeholders in those regards.
As the telecoms-industry specific intervention, the objective of which aligns with the objective of the National Cybersecurity Policy and Strategy (NCPS) document published by the Office of the National Security Adviser (ONSA), the NCC-CSIRT ensures continuous improvement of processes and communication frameworks to guarantee secure and collaborative exchange of timely information while responding to cyber threats within the sector.
In recent times, NCC-CSIRT has raised series of cyber-vulnerability awareness based on security advisories it receives from the Nigerian Cybersecurity Emergency Response Team (ngCERT), which is the national body for the implementation of the NCPS objective. However, Juice Jacking and Facebook for Android Friend Acceptance Vulnerabilities are the two first-ever cyber vulnerabilities published by the NCC-CSIRT.
Nasiru Yusuf Ibrahim
Nafisah Yusuf Hassan, a magistrate in Kano State, has been recommended for appointment as a judge of the Kano State High Court by the National Judicial Council (NJC).
KANO FOCUS reports that Hassan is among four judicial officers from Kano State recommended for elevation to the High Court bench out of 28 candidates selected nationwide.
The other nominees are Halima Yahuza Ahmad, Abdullahi Abdulsalam Bature and Musa Ibrahim Umar.
The NJC disclosed the recommendations in a statement issued by its Deputy Director of Information, Kemi Babalola-Ogedengbe, following its consideration of candidates for judicial appointments across the country.
The council said all recommended candidates were expected to be sworn in by their respective state governors without delay.
Hassan’s recommendation follows her years of service in the Kano State judiciary, where she has reportedly distinguished herself through diligence, professionalism and careful handling of cases.
She has been commended for her commitment to judicial ethics, diligence and fairness in the discharge of her responsibilities, achievements that contributed to her career progression within the judiciary.
Her elevation is part of a broader development in the Kano State judiciary, with four magistrates from the state successfully scaling the selection process for appointment to the High Court.
The four nominees were reportedly assessed during the selection exercise and demonstrated strong professional competence, while their service records were found to be free of adverse remarks.
Their recommendation marks a significant step in their judicial careers and is expected to strengthen the judicial workforce in Kano State upon their formal appointment.
Nasiru Yusuf Ibrahim
The Kano State Accountability Forum on Education (K-SAFE) says it has tracked nearly 1,000 education projects across the state as part of efforts to promote transparency, accountability and effective service delivery in the education sector.
KANO FOCUS the coalition’s Co-Chair, Dr Auwalu Halilu, disclosed this on Wednesday during an advocacy visit to the Kano State Ministry of Public Procurement and Project Monitoring.
Dr Halilu said K-SAFE had monitored projects in more than six local government areas, covering interventions implemented by the State Universal Basic Education Board (SUBEB), Kano State Senior Secondary Education Management Board and Local Education Authorities (LEAs).
He explained that the monitoring exercise involved physical inspections and documentation of projects through photographs, videos and geographical locations.
According to him, reports of the findings had been submitted to relevant ministries, departments and agencies (MDAs), highlighting projects that met required standards and those requiring further attention.
He cited Rimin Gado Local Government Area, where the coalition tracked more than 80 education projects, adding that it planned to extend the exercise to all 44 local government areas of the state.
The K-SAFE Co-Chair said the visit was aimed at presenting the coalition’s activities to the ministry and exploring areas of collaboration in procurement and project monitoring.
He called for the inclusion of civil society organisations in procurement and monitoring processes, particularly tender board activities and field inspections, to strengthen independent oversight and provide them with firsthand information on government projects.
Dr Halilu also requested the ministry’s support in organising capacity-building programmes for civil society organisations on procurement procedures, due process, project standardisation, monitoring and evaluation.
He said such training would enhance civil society organisations’ understanding of procurement regulations and the technical requirements guiding project implementation.
Responding, the Commissioner for Public Procurement and Project Monitoring, Dr Nura Iro Ma’aji, welcomed the delegation and acknowledged the coalition’s contributions to supporting the state government’s efforts in the education sector.
He expressed the ministry’s readiness to collaborate with K-SAFE through information sharing and other relevant engagements to strengthen accountability and ensure compliance with due process.
“From our side, we are ready to work together because we know what they have been doing to support Kano State Government in the education sector,” he said.
Dr Halilu further disclosed that the coalition and its partner organisations had carried out the monitoring exercise without financial sponsorship, describing it as a demonstration of their commitment to transparency and accountability.
He reaffirmed K-SAFE’s commitment to sustaining engagement with relevant government agencies, civil society organisations and the media to strengthen oversight of education projects across Kano State.
Ibrahim Khalil
Government Secondary School (GSS) Army Day Bukavu has emerged champion in both the male and female categories of the maiden Kano State Secondary Schools Tug of War Competition.
KANO FOCUS reports that the school clinched the double victory at the competition, which ended on Wednesday at the Kano Pillars Stadium, Sabon Gari, Kano.
Governors College finished as runners-up in the male category, while Government Girls College (GGC) Kano secured second position in the female category.
The competition was organised by the Kano State Tug of War Association in collaboration with the state Ministry of Education, the National Drug Law Enforcement Agency (NDLEA) and the Kano State Sports Commission.
The maiden championship brought together secondary school students to promote teamwork, discipline, unity and sportsmanship, while raising awareness about the dangers of drug abuse.
Speaking at the closing ceremony, the Vice Chairman of the Kano State Tug of War Association, Jamilu Uba Adamu, described the competition as a successful initiative that had achieved its objectives.
He commended the Ministry of Education, Sports Commission, NDLEA, Gongoni Company Limited and MAGZO Pharmaceutical for supporting the event, particularly through the provision of T-shirts and Pocari Sweat drinks.
Also speaking, the Secretary of the Kano State Tug of War Association, Bashir Muhammad Sulaiman, who represented the Executive Chairman of the Sports Commission, Muhammad Tukur Babangida, reaffirmed the commission’s commitment to developing grassroots and school sports.
He said the initiative would help identify and nurture young sporting talents across the state.
The closing ceremony was attended by a member of the Kano State Football Association Board, Rilwanu Idris Malikawa Garu, representatives of the Ministry of Education, NDLEA, the Sports Commission and other stakeholders in the sports sector.
The organisers congratulated the winning schools and commended all participating institutions and partners for contributing to the success of the maiden edition.
Nafisah Yusuf Hassan, three others recommended for appointment as Kano high court judges
K-SAFE tracks nearly 1,000 education projects in Kano, seeks procurement monitoring role
GSS Army Day Bukavu Wins Maiden Kano Secondary Schools Tug of War Championship
Gov Yusuf Nominates Spokesperson, Sunusi Bature Dawakintofa as Commissioner
One Year Without Baba: A Son’s Tribute to Alhaji Yusuf Hassan
Indonesian scholar proposes waqf model to reform almajiri education in Nigeria
Veteran NTA manager Dahiru Biso loses wife at 58
Two suspected bandits killed, N10m ransom recovered in Kano
Gov Yusuf Joins APC Leaders at Kaduna Presidential Campaign Flag-Off as Kano Delegation Draws Attention
